CVE-2017-6967: High severity Neutrinolabs Xrdp vulnerability
xrdp 0.9.1 calls the PAM function authstartsession() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pamlimits.so bypass.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
xrdpto a version that resolves this vulnerability.Fixed in 0.9.1 - Compensating control
Mitigate PAM session-module bypass by restricting/rationalizing which PAM session modules are used, and ensure PAM session management is initialized correctly so pam_limits.so cannot be bypassed (per the issue: xrdp 0.9.1 calls PAM auth_start_session() in an incorrect location).
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6967?
The severity of CVE-2017-6967 is classified as high with a score of 7.3.
How do I fix CVE-2017-6967?
To fix CVE-2017-6967, upgrade xrdp to a version later than 0.9.1.
What software is affected by CVE-2017-6967?
CVE-2017-6967 affects xrdp version 0.9.1.
What are the consequences of CVE-2017-6967?
The consequences of CVE-2017-6967 may include incorrect configuration or elevation of privileges.
What does CVE-2017-6967 exploit?
CVE-2017-6967 exploits the incorrect placement of the PAM function auth_start_session() during initialization.